CVE-2024-8305
MEDIUM6.5EPSS 0.29%MongoDB Server secondaries may crash due to forced index constraints
Published: 11/8/2024Modified: 5/20/2025
Description
prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4
Affected packages (1)
- Bitnami/mongodb>= 6.0.0, < 6.0.17, >= 7.0.0, < 7.0.14
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |